Kathleen - 
Although, in general I agree that you need the name of an actual person as POC 
for the CA who can make a commitment on behalf of that CA, that person is not 
always the one who you might be dealing with on technical questions during the 
application process.
For example, I am a contractor supporting the Federal PKI Management Authority. 
 One of the tasks I have been assigned is interfacing with those organizations 
the FPKI Policy Authority would like to distribute the Federal Common Policy.  
However, I am not in a position to make any commitment for the FPKI.  I am in a 
position to bring any requests that might require a commitment to the attention 
of those who have the right authority.

On the other hand, since our application has taken more than a year and we are 
on hold at the current time, it might make more sense to use an email alias as 
the official POC.  That way the CA can redirect any incoming email to more than 
one person to be sure there is coverage if the one person you are dealing with 
is out of the office or there is a change in personnel during the application 
process, etc.

Thanks,
Wendy

Wendy Brown
FPKIMA Technical Liaison
Protiviti Government Services
703-299-4705 (office)    703-965-2990 (cell)

[email protected]
[email protected]




NOTICE: Protiviti is a global consulting and internal audit firm composed of 
experts specializing in risk and advisory services. Protiviti is not licensed 
or registered as a public accounting firm and does not issue opinions on 
financial statements or offer attestation services. 

This electronic mail message is intended exclusively for the individual or 
entity to which it is addressed. This message, together with any attachment, 
may contain confidential and privileged information. Any views, opinions or 
conclusions expressed in this message are those of the individual sender and do 
not necessarily reflect the views of Protiviti Inc. or its affiliates. Any 
unauthorized review, use, printing, copying, retention, disclosure or 
distribution is strictly prohibited. If you have received this message in 
error, please immediately advise the sender by reply email message to the 
sender and delete all copies of this message. Thank you.

_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to